I,am afraid, I presented my position in an insufficient way.Briefly, the idea is to REJECT entire traffic in OUTPUT chain for random user, and change the user every 5 minutes.With other words, iptables rule:

will REJECT (for one random user) entire traffic in OUTPUT chain for 5 minutes. No Internet connection.Everyone else will enjoy Internet connection, every 5 minutes different (random) user will be discriminated